Configuring System Administrative Users - Cisco ASR 5000 Administration Manual

System Settings
• You can enter multiple commandguard exec-command exec_mode_category commands.
• All Exec mode commands beginning with the specified category word will prompt for confirmation,
• You can turn off confirmation prompting for a specific category using no commandguard exec-command
• If autoconfirm is overridden by commandguard exec-command for an Exec mode command, StarOS
• Users may selectively override confirmation prompting for any Exec mode configuration command that
For example, with commandguard exec-command card enabled, the confirmation prompt appears as shown
below:
[local]
Info: commandguard prevents autoconfirm of this command
Are you sure? [Yes|No]:
[local]

Configuring System Administrative Users

Getting Started describes how to configure a context-level security administrator for the system.
This section provides instructions for configuring additional administrative users having the following
privileges:
• Security Administrators: have read-write privileges and can execute all CLI commands, including
• Administrators: have read-write privileges and can execute any command in the CLI except for a few
• Operators: have read-only privileges to a larger subset of the Exec Mode commands. They can execute
• Inspectors: are limited to a few read-only Exec Mode commands. The bulk of these are show commands
Configuration instructions are categorized according to the type of administrative user: context-level or
local-user.
Important
◦ task
◦ upgrade
regardless if autoconfirm is enabled.
exec_mode_category.
displays an informational message indicating why autoconfirm is being overridden when you attempt
to execute the command.
supports the -noconfirm keyword.
host_name card busy-out 1
#
yes
host_name
#
those available to Administrators, Operators, and Inspectors
security-related commands that can only be configured by Security Administrators. Administrators can
configure or modify system settings and execute all system commands, including those available to the
Operators and Inspectors.
all commands that are part of the inspector mode, plus some system monitoring, statistic, and fault
management functions. Operators do not have the ability to enter the Config Mode.
for viewing a variety of statistics and conditions. An Inspector cannot execute show configuration
commands and does not have the privilege to enter the Config Mode.
For information on the differences between these user privileges and types, refer to Getting Started.
Configuring System Administrative Users
ASR 5000 System Administration Guide, StarOS Release 21.1
47